Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

altlinux логотип

ALT-PU-2021-4963

Высокий

ALT-PU-2021-4963: package batik update to version 1.14-alt1_1jpp8

Источник
errata.altlinux.org
Дата публикации
12.06.2021
Дата обновления
12.06.2021
Устраненные уязвимости
1

ALT Linux branch p11
ALT Container
ALT Education
ALT Workstation
ALT Workstation K
ALT Server
ALT Virtualization PVE Edition
ALT Linux branch p10
ALT Server
ALT Virtualization Server
ALT Workstation
ALT Workstation K
ALT Education
Simply Linux
Starterkit
ALT Container

Описание

This update upgrades batik to version 1.14-alt1_1jpp8.

Устраненные уязвимости1

Связанные уязвимости

CVSS3: 8.2
ubuntu
больше 5 лет назад

Apache Batik 1.13 is vulnerable to server-side request forgery, caused by improper input validation by the NodePickerPanel. By using a specially-crafted argument, an attacker could exploit this vulnerability to cause the underlying server to make arbitrary GET requests.

CVSS3: 8.2
redhat
больше 5 лет назад

Apache Batik 1.13 is vulnerable to server-side request forgery, caused by improper input validation by the NodePickerPanel. By using a specially-crafted argument, an attacker could exploit this vulnerability to cause the underlying server to make arbitrary GET requests.

CVSS3: 8.2
nvd
больше 5 лет назад

Apache Batik 1.13 is vulnerable to server-side request forgery, caused by improper input validation by the NodePickerPanel. By using a specially-crafted argument, an attacker could exploit this vulnerability to cause the underlying server to make arbitrary GET requests.

CVSS3: 8.2
debian
больше 5 лет назад

Apache Batik 1.13 is vulnerable to server-side request forgery, caused ...

CVSS3: 8.2
github
почти 5 лет назад

Server-side request forgery (SSRF) in Apache Batik